Synopsis On 17 October 2002, Air France Flight 062, a Boeing 777-228ER, serial number 32310, departed Paris, France, on a scheduled flight to Los Angeles, California, United States, with 172 passengers and 17 crew members on board. At 1459 Coordinated Universal Time, while cruising at flight level 360, the cabin crew smelled an abnormal odour in the cabin. The captain went to the cabin to investigate, and shortly thereafter, a fire started in the area of the left front cockpit windshield. The fire was extinguished by the relief first officer; however, two large cracks developed in the windshield. The crew diverted the flight to Churchill, Manitoba, and landed and stopped the aircraft on Runway 33, which was snow covered. The aircraft was subsequently moved to the terminal ramp area, and the passengers were deplaned through the aircraft's right front emergency egress slide. No injuries to passengers or crew were reported. The only damage to the aircraft was to the forward left windshield and the forward left glareshield area. Ce rapport est galement disponible en franais. 1.0 Factual Information 1.1 History of the Flight The crew reported for duty at Charles de Gaulle Airport (LFPG) at 0600 Coordinated Universal Time (UTC)1 to prepare for the extended range twin-engine operations (ETOPS) flight. Pre-flight preparation was normal and the aircraft departed at 0847 for Los Angeles, California, United States, with 3pilots (the captain, first officer and the relief first officer), 14flight attendants, and 172passengers on board. At 1459, passengers in rows42 to 44noticed an unusual smell and notified the cabin crew. The information was relayed to the captain who departed the cockpit to investigate, leaving the cockpit door open. Shortly after the captain's departure from the cockpit, a fire developed at the lower left corner of the captain's forward windshield. The relief first officer, who had been seated in the forward cabin, saw the captain walking to the rear cabin area and went forward. When the relief first officer entered the cockpit, the relief first officer saw the fire and fought it with the cockpit hand-held, Halon fire extinguisher. The entire contents of the extinguisher were discharged onto the fire and the fire was temporarily suppressed, but it recurred after the extinguisher was exhausted. The relief first officer obtained another extinguisher with the assistance of the principal chief of cabin, discharged it onto the fire, and the fire did not recur. The first officer asked the principal chief of cabin to call the captain back to the cockpit. The captain arrived back in the cockpit within a minute, and assumed pilot-not-flying duties. At the time the fire broke out, the designated ETOPS en route alternate airport for the flight was Winnipeg International; however, the closest available airport with runway and approach aids adequate for a Boeing777 in an emergency situation was Churchill, Manitoba, directly ahead on the flight planned route. The first officer reviewed the Churchill airport data in an emergency airfields supplement to assist in a decision on diverting the aircraft. The crew initiated a descent, dumped fuel, and prepared to land at Churchill. The aircraft landed safely and stopped on snow-covered Runway33 at Churchill. Firefighters from the Town of Churchill inspected the aircraft for fire and none was found. Taxiway A was inspected and sanded, the aircraft engines were restarted, and the aircraft moved to the ramp about three hours after arrival. Passengers deplaned through the aircraft's right front emergency egress slide and were moved to the airport terminal. 1.2 Injuries to Persons 1.3 Damage to Aircraft The fire originated at an electrical terminal block on the captain's left forward windshield. The major damage was limited to the windshield and the terminal block electrical connectors, which required replacement. There was some minor discolouration to an adjacent interior window post trim cover. 1.4 Other Damage 1.5 Personnel Information Company records indicate that the Chief Cabin Crew had completed initial training on the Boeing777 aircraft type in May2002, had completed the required cabin safety training, and had accumulated 683hours of flight time on the Boeing777 aircraft type as of the date of the occurrence. 1.6 Aircraft Information 1.6.1 General 1.6.2 Windshield Data 1.6.2.1 Previous Windshield Failure The aircraft was delivered new from the factory to Air France on 21May2002. The aircraft was put into desert storage for two months and began service on 18July2002. On 16August2002, after about one month in service, the crew noticed that the black polyethylene cap covering the J5window heat power terminal on the captain's left forward windshield began to overheat and melt during a routine flight from Shanghai, China, to Paris. There was no smell, warnings or alerts, and after consultation with maintenance personnel, the crew continued the flight to the destination with the window heat shut off. The polyethylene cap is not normally visible to a crew member from most seat positions; it is necessary to lean forward or rise from the crew seat in order to see it. At the time of the occurrence, the windshield had been in service for 456flight hours and 58.5cycles. Once on the ground, maintenance personnel replaced the window heat control unit (WHCU) and tightened the electrical power connector. A replacement electrical power connector and cap were not available and the J5terminal connector was sealed using a CAF4silicone sealant. The windshield heat system was tested and found to be serviceable. A full bench check was subsequently carried out on the removed WHCU and no faults were found. Maintenance control issued a work instruction to replace the windshield electrical power connector by 26August2002. The work instruction was queried by maintenance central on 27August2002 and the task, having not been completed, was deferred to a scheduled maintenance check of the aircraft scheduled for 09to 12October2002. The task again was not completed during the scheduled maintenance check, and the status of the work instruction remained as DUE. It was later established that the connector and cap had been in stock when the work instruction for the maintenance check was queried, but that the operator's inventory system showed the parts as unavailable. Although the parts were on hand, the inventory system had reserved them for this task. The system did not differentiate between parts that were not in stock and those that had been reserved, and, therefore, indicated to maintenance personnel that the parts were unavailable for this task. The operator's records did not indicate that other cockpit window terminals had been serviced since the aircraft entered service. CAF4 silicone is rated for use between -65C to 225C, up to 250C for short periods, and it decomposes at about 482C. The cap material was polyethylene L-P-390, Typel, ClassL, which melts at 132C and ignites at around 355C. 1.6.2.2 Windshield Description The left forward windshield, part number141W7400-1, serial number02039H8228, was manufactured by PPG Industries Aircraft and Specialty Products in Huntsville, Alabama, in February2002. The windshield was installed in the newly manufactured aircraft, which, at the time of the 17October2002 occurrence, had been in service for 1365flight hours and 168.5cycles. The windshield consists of three plies of glass with exterior surface anti-icing and exterior and interior surface anti-fogging protection. The plies are comprised of chemically tempered glass, separated by interlayers of polyvinyl butyral and urethane. The glass and interlayer materials are bonded together in an autoclave under specific time, temperature and pressure conditions. The window is designed to withstand fail-safe pressure loads with a single glass ply failed, and normal pressure loads with multiple glass plies failed. The windshield heat system is normally powered whenever the aircraft electrical system is powered. The anti-ice and anti-fog elements are connected to separate power and sensor terminal blocks located on the upper and lower edges of the windshield. The connectors are numbered J1throughJ15 (seeAppendixA). The terminal blocks are made of a cast epoxy material with brass blocks embedded into them to allow for the attachment of the window bus bar conductors. The terminal blocks have a cavity to allow for the soldering of the flat-braided copper conductor from the bus bar to the brass blocks. The cavity is then filled with a polysulphide filler/adhesive identified as PR1425. The filler/adhesive contains carbon black as an ultraviolet stabilizer. After the copper conductors are soldered to the terminal block, the block is then glued to the windshield using the PR1425filler/adhesive. The electrical power connector consists of a tin/gold-plated beryllium copper alloy insert moulded in an epoxy block with a 12-gauge electrical conductor crimped into the insert. The power connector is attached to the terminal block with a stainless steel screw and lockwasher arrangement, which is torqued to a specified value. The stainless steel screw has a different thermal coefficient of expansion from that of the brass in the terminal block. A silicone rubber Oring is installed around the outer periphery of the power connector to seal the connection at the terminal block. The aircraft maintenance manual (AMM) calls for a torque of 25to 30inch-pounds to be applied to the power terminals and a torque of 12to 15inch-pounds for the sensor terminals. Once installed, a black plastic cover is snapped into place over the epoxy block to shield the electrical connection. 1.6.2.3 Windshield Manufacturing Process During the manufacturing process, approximately 2inches of flat braided copper conductor from the anti-ice and anti-fog elements is left extending from the edge of the inboard ply to enable it to be hand soldered to the brass insert and then rotated for attachment to the edge of the window. The length of copper braid brought out from the window edge is covered with heat shrink insulation. Before the braid is soldered to the terminal, this heat shrink is melted with a soldering gun and removed, exposing to inch of bare copper braid for soldering purposes. If a braided cable is cut too short, it will be strained when the block is folded into place, if it is cut too long, it will bunch under the block. Neither condition is visible once the block is glued in place. During the soldering process, the braid is positioned and held in place against the brass block by hand. Ideally, the braid is located in the middle of the brass block. A soldering gun is used to melt the 60/40(tin/lead) resin core solder and join the two parts. The solder has a melting point of about 190C. During the soldering process, care must be taken to ensure that the soldered joint is sufficiently heated and that the braid is not moved before solidification of the solder occurs, as either condition could result in a cold-soldered joint. A cold-soldered joint is brittle and may break when moved. 1.6.2.4 History of Investigated Window Terminal Incidents On 27 September 1993, Boeing issued an All-Operator Message (7240-93-1844), to increase the torque requirement on the electrical power and sensor terminal connector screws on all cockpit windows on Boeing747 and 767aircraft. In its message, Boeing said that the original screw torque requirements may have been insufficient to prevent the screws from loosening in service. A loosened screw could cause the current path to be interrupted, which in turn could cause arcing, or power may be transmitted through the terminal screw in lieu of directly from the wire terminal to the terminal block insert. When large amounts of electrical current are transmitted through the screw, it can overheat, becoming red hot, and cause the sealant adjacent to the threaded insert to produce smoke. During the design of the 777, Boeing was aware of three occurrences of smoke in the cockpit of 767aircraft caused by arcing or burning at the Number1 window power terminal. The increased torque requirement was incorporated into the 777production drawings and the AMM instructions. In 1996, the Transportation Safety Board of Canada (TSB) investigated a Boeing767 (report No.A96A0146) involving an arc and smoke at the J5terminal on the right cockpit window, followed by a brief fire. Because of the extensive damage, the origin of the failure could not be determined; however, it was suspected that the copper braid conductors (near the brass block insert) must have severed to initiate the arc. In July 2003, a Boeing777 en route from Rome, Italy, to New York, New York, United States, also experienced a fire at the captain's windshield J5terminal. The crew in that occurrence initiated an emergency descent and completed a successful landing at Shannon International Airport, Ireland. 1.6.2.5 Flight Deck Airflow When both air conditioning packs are operating, the air supply into the flight deck consists of 100percent outside air from the left air conditioning pack, with no re-circulated air from the cabin. The air supply to the flight deck is provided in sufficient quantities to maintain a slightly positive pressure in order to exhaust air to the electrical and electronic (EE) bay under the cockpit and on through to the rest of the aircraft, where it entered the cabin at approximately row 42to44. This maintains good ventilation for the flight crew, provides flight deck smoke evacuation, and prevents EE bay smoke penetration into the flight deck in the event of a fire in the EE bay. 1.6.2.6 Warnings and Alerts The Equipment Cooling Override (EQPTCOOLINGOVRD) and the Window Heat Left Forward Inoperable (WINDOWHEATLFWDINOP) warning lights appeared in the cockpit while the fire was being extinguished. Both warnings were also displayed as advisory messages on the engine indication and crew alerting system (EICAS). In addition, two aircraft communications addressing and reporting systems (ACARS) maintenance fault messages were generated by the central maintenance computing function (CMCF) at 1503. The flight data recorder (FDR) also recorded an EE Bay Smoke Warning discrete at 1503:22. The discrete remained on for approximately 17minutes. The crew completed the following checklist procedures in response to the emergency: WINDOWHEATLFWDINOP (one item is to select the window heat switch to OFF), EQPTCOOLINGOVRD and WINDOWDAMAGE (un-annunciated). 1.6.2.7 Equipment Cooling Override Light The EQPT COOLING OVRD light is illuminated by activation of the EE cooling system remote smoke detector (RSD). The RSD requires optically reflective particles to trigger it. The EE cooling exhaust system draws air from several locations, including from behind the flight deck forward instrument panel. A small portion of the exhaust air is routed past the RSD. In flight, the EE cooling system RSD is designed to alarm at a 3percent particle obscuration level and, as such, is not designed to detect small amounts of smoldering smoke from overheated equipment or shorted wires. With the activation of the RSD, the following actions occur: The EE cooling system goes into the override mode and all supply and vent fans are turned off. Cabin pressure differential is used to reverse the airflow and pull the smoke through the system and equipment and discharge it overboard. This prevents smoke in the EE cooling system from reaching the passenger cabin. The override mode supplies adequate cooling while the aircraft is in cruise flight, but because the airflow decreases as the aircraft descends, due to the decrease in cabin pressure differential, a caution is provided to the crew in the Abnormal Procedures checklist. The caution warns that after 30minutes of operation at low altitude and low cabin differential pressure, electronic equipment and displays may fail. The EQUIP COOLING OVRD advisory light illuminates and an EQUIPCOOLINGOVRD advisory message is displayed on the EICAS. The FDR records the EE Bay Smoke Warning discrete. The CMCF records 26Cargo Smoke Detection System Fault, which appears as an ACARS maintenance fault message. 1.6.2.8 Window Heat Left Forward Inoperable Light The WINDOW HEAT L FWD INOP light is illuminated by the WHCU when a window overheat is detected or a system fault has occurred and the WHCU has automatically turned off the window heat. The WHCU regulates the windshield temperature from 30.55C to 35C and monitors a current range of between 13.6and 27.8amperes while in flight. When a system fault is detected, the WHCU will also display an advisory message on the EICAS, indicating that the primary window heat for the affected window is OFF. 1.6.3 Aircraft Navigation Systems The flight crew of Air France Flight 062 (AFR062) used the aircraft flight management system (FMS) as the primary navigational aid to manage the aircraft's lateral and vertical flight paths. The FMS consists of two flight management computers (FMC) and three control display units (CDUs). The crew used the FMS to display the lateral position of the aircraft during the approach to Churchill. The FMC determines the present position from the global positioning system (GPS), the air data inertial reference system (ADIRS), and the navigation radios. The FMC automatically tunes the very high frequency omni-directional range (VOR), the distance measuring equipment (DME), and the instrument landing system (ILS) radios. The aircraft also is equipped with automatic direction finder (ADF) radios, which the crew must manually tune, using the CDUs, and which will display bearing pointers on the navigation displays. The FMC does not process data from the ADF radios. The FMC contains a navigation database with most data on navigation charts approach plates. As a customer option, the navigation database in use on the occurrence aircraft did not include non-directional beacon (NDB) approaches. 1.6.4 Flight Deck Door The aircraft door is hardened against intrusion. In accordance with industry practice, the operator's policy is that the door remain closed and locked during normal operations. In responding to the smell in the cabin, the captain left the door open while departing the cockpit, and the relief first officer was able to enter the cockpit quickly. 1.7 Meteorological Information When the captain left the cockpit at approximately 1500, the first officer made a weather request on the aircraft ACARS system for Churchill, which was the closest emergency airport with a runway adequate to land the Boeing777. At 1500, the weather at Churchill was observed to be as follows: wind from 360true (T) at 7knots, visibility 15statute miles, scattered clouds at 2400feet, broken clouds at 4400feet, temperature -2C, dew point -4C. When the fire broke out, AFR062 was approximately 290nautical miles (nm) northeast of Churchill, operating in day visual meteorological conditions (VMC) at flight level (FL)360. At 1600, the Churchill weather was observed to be as follows: wind from 020T at 7knots; visibility 15statute miles, with showers in the vicinity; scattered clouds at 2300feet; broken clouds at 22000feet; temperature -1C, dew point -5C. AFR062 landed at Churchill at 1602 in day VMC conditions. Recent snowfall had left about inch of snow on the runway. 1.8 Aids to Navigation 1.8.1 Churchill On the date of the occurrence, NAV CANADA radar coverage did not extend into the area northeast of Churchill, and the air traffic control service provided was based on procedural separation. The Churchill Airport was served by a combined VOR and DME (YYQ), three NDBs, and an ILS for Runway33. The published instrument approaches for Runway15/33 at the Churchill Airport consisted of a Localizer/NDB for Runway15, an NDB for Runway33, and an ILS for Runway33. In addition, there are VOR, VOR/DME and NDB approaches for Runway07/25. The ILS approach has the lowest approach minima of all the approaches at Churchill. Notice to Airmen (NOTAM) 020207, issued at 1938 on 16October2002, was in force for the Churchill Airport and advised operators that the ILS to Runway33 was unserviceable until 2359 on17October2002. Air France includes NOTAM information for emergency airports in flight crew briefing packages for the following events: airport shutdown, runway closures or restrictions, and change of communication frequencies. NOTAM020207 was available in the Air France computer flight planning system, but was not included in the briefing package for the crew of AFR062 because emergency airport approach aid unserviceability is not one of the criteria for inclusion. 1.8.2 Company Information Air France provides company-approved aeronautical information publications to its flight crews. The first officer had available, at his crew position, an emergency airfields supplement that contained basic information about emergency airport location and elevation, runway size and orientation, communication frequencies, and airport services. The information listed in this supplement for Churchill was current. Detailed information on airport facilities and instrument approaches is required when instrument meteorological conditions (IMC) prevail. In the Boeing777, approach plates and aerodrome charts for emergency diversion airports were kept in a binder in a compartment behind and to the left of the captain. The relief pilot retrieved this binder while the captain and first officer performed other tasks. The plastic binder cover was held closed by a metal wire and lead seal. The relief pilot was unable to break the wire or seal and had to tear the binder cover away from the wire to gain access to the documents in the binder. The Churchill documents in the binder were as follows: approach plates for the ILS to Runway33, the NDB to Runway33, and the ILS (Back Beam) and the NDB to Runway15; the minima for these approaches; and an aerodrome chart. The responsibility for the dissemination of Canadian aeronautical information has been delegated to NAV CANADA by the Minister of Transport. Advance notice of changes to information for locations within Canadian Domestic Airspace is disseminated by NAV CANADA to producers of aeronautical information databases and publications by the weekly Aeronautical Information Regulation and Control (AIRAC) Canada document. A number of revisions to information about the Churchill Airport and navigation aids occurred from 1999to2002, and were disseminated via the AIRAC. These included the redesignation of the Y(Yankee) NDB to ZCH (Beluga), an advisory that the ILS33glide path was unreliable below 323feet above sea level (asl) rather than 260feet asl, an increase of the ILS33decision height above the threshold from 200to 250feet, the decommissioning of Apron1 and TaxiwayA north of Runway25, the commissioning of the new Apron1 between Runway15 and Runway07, and the redesignation of TaxiwayB as TaxiwayA. On 13 March 2001, Air France deleted Churchill from the company list of emergency airfields and removed Churchill from the register of current documentation to be included in the emergency binder. The Churchill documents had not been removed from the binder carried in the occurrence aircraft; however, they were no longer in the register of current documentation, and none of the above revisions had been incorporated by normal company amendment processes. 1.9 Communications 1.9.1 Internal Communications The first communication to the flight crew regarding a burning odour was directly from a flight attendant who entered the cockpit at approximately 1500 and reported a smell of smoke in the vicinity of row44. The flight attendant was instructed to report back within 10minutes. Within a couple of minutes, a flight attendant again entered the cockpit and requested that the captain come to the cabin to assess the smell. The captain went aft to the cabin and was seen by the relief pilot, who then went forward to the cockpit. After the captain had left but before the relief pilot arrived, the first officer observed smoke and flames coming from the left windshield area and donned his oxygen mask. At 1502, the first officer had the principal chief of cabin recall the captain via the interphone. Seconds later, the relief first officer arrived in the cockpit, donned the observer station oxygen mask and used the cockpit hand-held fire extinguisher to fight the fire. The relief first officer directed a flight attendant to bring another fire extinguisher from the cabin, and this second extinguisher was then used to put out the fire. At about the same time, the captain returned to his seat in the cockpit and donned an oxygen mask. Subsequent communications between the flight crew and the cabin crew were handled by the relief first officer either directly or using the interphone, and involved coordination for the impending arrival at Churchill. 1.9.2 External Communications At the time of the occurrence, AFR062 was about 290nm northeast of Churchill, over Hudson Bay, and had been communicating with Arctic Radio via high frequency radio. The crew had been advised to contact the Winnipeg Area Control Centre (ACC) on very high frequency (VHF) 123.9MHz when they passed 90west longitude. The transmitter for that frequency was located at Churchill. One characteristic of VHF radio emissions is that the transmitted radiation does not follow the curvature of the earth or bend around obstructions; VHF propagation is via line of sight. At an altitude of FL360, the useful line of sight distance would be about 200nm, and at 6000feet it would be about 80nm. Shortly after the fire started, the first officer made a MAYDAY transmission on the emergency frequency 121.5MHz, and another aircraft responded and relayed the call to the Edmonton ACC. The MAYDAY call was also received by the Rankin Inlet Flight Service Station, and AFR062 was advised to contact the Winnipeg ACC on 123.9MHz. The crew and the Winnipeg air traffic controller were initially unable to establish direct controller-pilot communications on 123.9 MHz because the aircraft was beyond the useful line of sight range. The crew commenced descent from FL360 at 1508 when they were 224nm from Churchill. During their descent the controller used another aircraft to relay transmissions to and from AFR062, and for a short period was able to communicate directly. The crew levelled off at 6000feet at 1524 when they were 134 nm from Churchill, again below the line of sight. At 1535, they once again established direct communications with the controller at a distance of 90nm from Churchill and remained in contact with the controller until 1549 when they switched to 122.2MHz and established contact with Churchill Radio. The controller provided air traffic control (ATC) clearances and instructions to the crew, obtained information from them regarding the aircraft's status, and provided information needed by the crew to prepare for the arrival at Churchill. The Air Traffic Control Manual of Operations required that landing information be issued to the crew; the crew received all of the required information from the controller, except for the approach aid in use. The controller was aware that the Churchill ILS was unserviceable, but did not immediately provide this information because of the communications problems experienced as AFR062 descended below the line of sight. The controller also assumed the ILS information was of relatively low importance to the crew because the weather was suitable for a visual approach. The information that the Churchill ILS was not available was transmitted on 123.9MHz from another aircraft to the controller at 1514. This transmission was recorded on the AFR062 cockpit voice recorder (CVR); however, it was not heard by the crew. At 1549, the crew switched to 122.2MHz and established direct contact with Churchill Radio. The Flight Service Station Manual of Operations required that advisory information be issued to the crew; AFR062 received all of the required information from the Churchill flight service specialist, including the unavailability of the ILS. 1.10 Aerodrome Information The Churchill aerodrome is operated by Transport Canada. The aerodrome has two runways; only Runway15/33 was adequate for Boeing777 operations. Runway15/33 is 9200feet long by 160feet wide and has an asphalt surface. The aerodrome elevation is 94feet asl. A series of runway surface condition NOTAMs for the Churchill aerodrome had been issued. On the day of the occurrence (17October), the runway surface condition had been observed at 1310 and indicated that Runway15/33 was 100percent covered with loose snow up to inch in depth. There were windrows 10feet inside the runway lights, up to 4inches high and 8 feet wide. The flight crew did not have any difficulty in braking or steering the aircraft on landing. The Canadian Aviation Regulations designate a number of airports that are required to provide an airport rescue and firefighting (ARFF) service. The Churchill aerodrome is not so designated and is not required to provide this service. Firefighters from the Town of Churchill, located about 4nm from the airport, responded to the occurrence and inspected various areas of the aircraft after it had landed. The firefighting service provided by the Town of Churchill is not considered by Transport Canada to meet the ARFF criteria. The ETOPS guidance material contains standards that must be met for an airport to be considered an adequate ETOPS en route alternate. In particular, an airport must have ARFF capabilities to be considered an adequate en route alternate airport. Due to the fact that Churchill does not provide an ARFF service, it is not adequate to be designated as a flight-planned ETOPS en route alternate. Air France uses Churchill as an emergency airport, not as an ETOPS alternate. Winnipeg and Goose Bay were the designated ETOPS alternates for the occurrence flight. 1.11 Flight Recorders 1.11.1 General The aircraft was equipped with a Honeywell (AlliedSignal) solid state FDR and a Honeywell (AlliedSignal) solid state CVR. The recorders were forwarded to the TSB Engineering Branch for playback and analysis. Approximately 26.9hours of flight data, including the incident flight, were recovered from the FDR. The CVR recording was from approximately 28minutes prior to the fire and ended on the ground in Churchill, 79minutes later, when the aircraft was shut down. While on the ground, approximately 2hours 23minutes after the initial shutdown, aircraft electrical power was restored and the CVR powered up briefly, recording the final 14minutes of the 2-hour recording. 1.11.2 CVR Recording Quality The transcription of the internal crew communications, using the two-hour mixed audio channel, was hampered by an imbalance in channel input levels. The levels of the incoming VHF radio transmissions were considerably higher than the crew's hot microphone levels, effectively masking the crew's internal communications in a significant number of areas of the recording. In an attempt to improve the speech intelligibility, signal processing techniques were used; however, these attempts were of limited success. France's Bureau d'Enqutes et d'Analyse (BEA) had encountered similar problems before this occurrence and had worked with an aircraft manufacturer to test a complete radio transmission line, including a ground station and a number of different VHF transceivers. Testing of nine VHF transceivers from three different suppliers indicated that all of the transceivers tested had output levels of varying degrees above nominal values. This suggested that there were procedure variations in the pre-setting of the transceivers by the suppliers prior to their installation, which may explain the imbalance in the radio channel levels on the occurrence CVR recording. The European Organisation for Civil Aviation Equipment (EUROCAE) publishes technical standards for avionics, including both functionality, testing and form fit standards. Today, EUROCAE documents are considered by Joint Aviation Authorities (JAA) to be referenced by the JAA Joint Technical Standard Orders and other regulatory documents. The main European administrations and the main aircraft and equipment manufacturers are members of EUROCAE and actively participate in the Working Groups that prepare these specification documents. EUROCAE ED specifications contain standards for products. Amendments to the EUROCAE ED56a specifications (Minimum Operational Performance Requirements for Cockpit Voice Recorder Systems) were proposed in2000 to ensure adequate CVR performance. These amendments, which specified that the radio signals be pre-set to levels lower than the hot microphone levels, were later incorporated into ED112 (Minimum Operational Performance Specification for Crash Protected Airborne Recorder Systems) and published in March2003. 1.12 Aircraft Damage and Examination 1.12.1 General The aircraft was examined in Churchill after the occurrence and none of the window heat power or backup power control circuit breakers was found tripped. The damaged left front cockpit window and its associated window heat control unit were removed for examination. 1.12.2 Terminal Screw Torque Prior to the removal of the damaged window, the power and sensor terminal connector screws were checked for proper torque as specified in the AMM (see AppendixA for a list of the recorded torque values). Three of the five power terminal connector screws were checked, and two of these were found to be well below the desired torque requirements. The torque on the remaining two power terminal connector screws, J5andJ13, was not checked in order to leave the burnt connectors undisturbed until laboratory examination. However, they were determined to be at least finger tight. One of the six sensor terminal connector screws was marginally below the required torque values. The terminal connector screw torque on the undamaged right front cockpit window was checked and all five of the power terminal connector screws were found to be well below the desired torque requirements, with two of the five having no torque reading at all. Three of the six sensor terminal connector screws were marginally below the desired torque value. After the occurrence, Air France conducted a fleet inspection of its 25Boeing777 aircraft to check the security of the J5and J13power terminal connector screws. Each aircraft is equipped with two J5and two J13terminals, and Air France found that on four of the aircraft, 11of the 16terminal connector screws showed torque values lower than those specified in the AMM. On one of the four aircraft, F-GSPC, the J5connector on the left front windshield showed traces of overheating and melting of the black plastic cover. The electrical power connector was replaced; during the pre-flight check of the aircraft the next day, the connector was again found to be overheated. The window and its J5connector were removed and examined at PPG Industries, Inc. (TSB Engineering Laboratory Report LP105/2002). The power terminal connector screw was found to be cross-threaded in the brass block, resulting in a poor electrical connection and overheating of the terminal connector. It could not be determined whether the screw had been cross-threaded during or prior to the replacement of the electrical power connector. 1.12.3 Window Examination The window was examined at PPG Industries in December2002. The terminal block in the area of the J5brass connector was damaged due to the intense heat of the event, and the polysufide filler/adhesive was consumed by fire; the brass block insert was lying free but was still attached on one end to the J5power connector lead wire. The terminal block in the area of the J13brass connector was intact. The breaking torque on the J5and J13power terminal connector screws was checked and determined to be less than 5inch-pounds. The ganged J5/J13 terminal block was folded back from the window to expose the J5and J13braid wires. Approximately 0.6inch of J5braid wire from the edge of the glass to the terminal block base was intact, with the remainder of the braid either destroyed or melted. The J13braid wire was intact with no indication of straining or bunching of the braided cable. The soldered connection at the J13terminal was intact with no signs of a cold-soldered joint. A blob of solder from the J5brass connector was found in a thermal cavity in the glass surface beneath the J5terminal block area with two parallel cracks, each about 35inches across the length of the windshield, emanating from the cavity. The thermal cavity was created when an area of glass beneath the J5terminal block was untempered due to exposure to localized extreme heat, and fragments of the untempered glass were dislodged during disassembly. The damage to the terminal block indicated that the heat had been sufficient to ignite the polysulphide filler/adhesive, creating the fire. The temperatures associated with resistive heating could account for the melting of the solder but would not account for the thermal untempering of the glass. Such temperatures are usually associated with arcing, which can easily reach temperatures in excess of 2760C. As such, the melting of the solder and the detachment of the braid from the brass connector would likely have led to an electrical arcing event, as power from the WHCU was still being applied to the terminal. With the disintegration or melting of the J5braid wire, it was not possible to establish the condition of the braid or its soldered connection prior to the fire. The J5solder joint appeared to be high on the brass terminal, but whether the soldering position had stretched the braid wire during installation could not be determined. The J5connector/terminal block inserts were broken apart and foreign material was present on both mating surfaces; no pitting was observed. This material was not identified. Debris was also noted on the threads inside the terminal block. 1.12.4 Window Heat Control Unit Testing The WHCU was tested at the manufacturer's facility in France, under the supervision of investigation staff from the BEA. The unit has a self-test feature that displays fault messages on the EICAS; however, the unit is not equipped with an electronic memory that stores fault data once power has been removed. A full bench acceptance test was carried out and no faults with the control unit were found. It was believed that the arcing, which occurred at the J5window terminal, did not induce current variations beyond the specified values; therefore, no alarm signal was sent to the EICAS until after the fire was established. 1.13 Fire 1.13.1 General The fire was limited to the immediate area surrounding the J5/J13 terminal block on the left forward windshield as the fire burnt up along the windshield in a high narrow flame emanating from the terminal block. Crew flight planning papers lying on top of the instrument panel glare shield caught fire, but the papers were quickly removed by the first officer and the flames extinguished. Other loose paper in the cockpit was gathered and removed by the principal chief of cabin to minimize the fire hazard. The sustaining fuel source for the fire was the polysulphide filler/adhesive used in the construction and installation of the windshield terminal block. The fire burned for just over two minutes from approximately 1502 to 1504, until it was extinguished. 1.13.2 Extinguishing the Fire Bringing the fire under control required the repeated full use of the single hand-held, cockpit mounted, one-kilogram Halon 1211 fire extinguisher, as well as the partial use of a second identical fire extinguisher that had to be brought into the cockpit from the cabin area. Halon 1211 is a streaming agent that vaporizes to a gas as it is discharged. The Halon gas does not quench a fire, but reacts chemically with the fire to disrupt its chain reaction. Because of this, the burning material can flame up again after the Halon is dissipated, necessitating repeated use of the extinguisher. The aircraft's EE exhaust system would have been ventilating the Halon gas rapidly, reducing the concentration of the Halon at the site of the fire. As such, repeated use of the extinguisher would have been required as long as combustible materials remained, power was present at the terminal, and the temperature at the connector remained hot enough to re-combust the materials. The crew flight deck procedure for SMOKE/FUMES/FIRE ELEC source identified is to remove the electrical power from the affected equipment as soon as possible (Boeing777 Quick Reference Handbook (QRH)00.21). If the source is not identified, the crew will work with the cabin attendants to turn off galley power, cabin lights, the main in-flight entertainment system and passenger cabin power, and land at the nearest suitable airport. 1.13.3 Location of Fire Extinguishers A single cockpit fire extinguisher is mounted in a cabinet behind the captain's seat, along with a crash axe and gloves. At this location, the fire extinguisher was out of the reach of a seated first officer. Air France policy is that at least one pilot be seated at the controls with the restraining belts fastened during flight. 1.14 Survival Aspects No airstair or other passenger-handling equipment is available at Churchill. The policy of Transport Canada is that passenger-handling equipment is to be provided by airline companies using the aerodrome, based on market need. The aircraft's emergency slides are designed to evacuate passengers rapidly in an emergency. They are not designed for normal egress, and their use may result in passenger injury.